ILP Abogados
Madrid · Internacional

Guide for Crypto-Asset Investors and Providers: Understanding Suitability in MiCA

Last updated: 5 August 2026.

Quick answer. MiCA, the EU Regulation on Markets in Crypto-Assets, provides a comprehensive framework for the issuance and trading of crypto-assets and related services. Within this framework, ESMA has issued guidelines to ensure that crypto-asset service providers (CASPs) offering portfolio management comply with specific suitability requirements. CASPs must clearly inform clients about the purpose and scope of the suitability assessment, gather comprehensive and reliable client information — updated at least every two years and after significant life events — assess the client’s understanding of the risks of crypto-assets, and maintain up-to-date knowledge of the credit, market, liquidity and cybersecurity risks of the assets they offer, matching clients only with suitable investments. Specific rules cover transparency in robo-advice and the assessment of legal entities or groups.

MiCA, or the Regulation on Markets in Crypto-Assets, is a new EU regulation aimed at providing a comprehensive framework for the issuance and trading of crypto-assets, as well as related services.

Below, we leave you the collaboration in video format, in case it is of interest to you:

The Howey Test: How to Identify Regulated Securities in the Age of Cryptoassets??

As part of this framework, the European Securities and Markets Authority (ESMA) has issued guidelines to ensure that crypto-asset service providers (CASPs) offering portfolio management services comply with specific suitability requirements.

These guidelines outline the obligations that CASPs must follow to ensure their services are suitable for their clients. The key areas covered are:

  • Communication with Clients:

CASPs must clearly inform clients about the purpose and scope of the suitability assessment, emphasizing the importance of providing accurate information and avoiding ambiguities about responsibilities. For automated advice (robo-advice), there must be transparency in how decisions are made and opportunities for human interaction.

  • Understanding Clients:

CASPs must use clear and specific questions to gather comprehensive data from clients, including personal and financial details, and assess their understanding of investment risks, particularly those associated with crypto-assets. The information collected must be proportional to the complexity of the crypto-assets and the client’s level of sophistication.

  • Reliability and Updating of Client Information:

Ensuring client information is accurate and reliable is essential, using appropriate methods to verify it and updating it regularly, at least every two years, and in response to significant life events or changes in financial circumstances.

  • Handling Legal Entities or Groups:

CASPs must develop policies to manage suitability assessments for legal entities or groups, considering both the representative’s characteristics and those of the underlying client, with a prudent approach to differences within the group.

  • Understanding Crypto-Assets:

CASPs must maintain up-to-date knowledge of the characteristics and risks associated with the crypto-assets they offer, including credit, market, liquidity, and cybersecurity risks, ensuring the information is reliable and current.

  • Suitability of Investments:

CASPs must match clients with suitable crypto-assets and services, considering their risk profiles, financial objectives, and portfolio diversification, and monitor and update automated tools to reflect current market conditions and regulatory requirements.

  • Consideration of Costs and Complexity:

It is necessary to evaluate the costs and complexity of different investment options, justify any selection that is more costly or complex, and inform clients about any restrictions in the range of products offered.

  • Assessment of Switching Costs:

CASPs must analyze the costs and benefits of changing investments, including monetary and non-monetary factors, and communicate them in the suitability report, monitoring circumvention risks.

  • Staff Qualification:

Personnel involved in suitability assessments must be adequately trained and knowledgeable about crypto-assets, regulatory requirements, and any automated tools used, ensuring their understanding and skills for the role.

These guidelines are crucial for enhancing investor protection in the crypto-asset market, ensuring that CASPs thoroughly assess the suitability of their services and products for each client, maintaining high standards of due diligence and transparency.

If you enjoyed this article, you might also find the following interesting:

MiCA in detail: Pre- and post-execution transparency obligations in cryptoasset transfers that every investor should be aware of

Don’t be left in doubt, get in touch. We’ll be happy to help and offer you solutions.

Frequently asked questions

What is MiCA?

MiCA, the Regulation on Markets in Crypto-Assets, is an EU regulation aimed at providing a comprehensive framework for the issuance and trading of crypto-assets, as well as related services. As part of this framework, ESMA has issued guidelines on the suitability requirements that crypto-asset service providers must observe.

What must CASPs tell clients about the suitability assessment?

CASPs must clearly inform clients about the purpose and scope of the suitability assessment, emphasising the importance of providing accurate information and avoiding ambiguities about responsibilities. For automated advice (robo-advice), there must be transparency in how decisions are made and opportunities for human interaction.

What client information must CASPs gather and how often must it be updated?

CASPs must use clear and specific questions to gather comprehensive data, including personal and financial details, and assess the client’s understanding of investment risks, particularly those associated with crypto-assets. The information must be verified, kept reliable and updated regularly — at least every two years — and in response to significant life events or changes in financial circumstances.

How are legal entities or groups handled in the suitability assessment?

CASPs must develop policies to manage suitability assessments for legal entities or groups, considering both the representative’s characteristics and those of the underlying client, and adopting a prudent approach where there are differences within the group.

What knowledge must CASPs have of the crypto-assets they offer?

CASPs must maintain up-to-date knowledge of the characteristics and risks associated with the crypto-assets they offer, including credit, market, liquidity and cybersecurity risks, ensuring the information used is reliable and current, so that clients are matched with suitable investments.



Contact
Don’t be left in doubt, get in touch. We’ll be happy to help and offer you solutions.

Related tool, free to use: the RWA tokenisation simulator and token issuance check.

GUÍA GRATUITA

Regulación Financiera España 2026

DORA + MiCA + MiFID II + EMIR en un solo documento

Descargar gratis →

Videos relacionados

Cargando videos…

Discover more from ILP Abogados

Subscribe now to keep reading and get access to the full archive.

Continue reading